 Matt Caswell
|
da1c088f59
Copyright year updates
|
1 year ago |
 Theo Buehler
|
959c150a1d
Fix incorrect ERR_raise() calls
|
1 year ago |
 Dr. David von Oheimb
|
8a2f9a7cc8
x509/v3_purp.c: rename 'require_ca' parameters to the more adequate 'non_leaf'
|
2 years ago |
|
Dr. David von Oheimb
|
3fa6dbd1be
x509/v3_purp.c etc.: improve doc/comments on codesign and timestamp purpose checks
|
2 years ago |
 FdaSilvaYY
|
c734058309
crypto/*: Fix various typos, repeated words, align some spelling to LDP.
|
2 years ago |
 Richard Levitte
|
e077455e9e
Stop raising ERR_R_MALLOC_FAILURE in most places
|
2 years ago |
 Lutz Jaenicke
|
178696d602
X509: Add "code sign" as purpose for verification of certificates
|
3 years ago |
|
Dr. David von Oheimb
|
2c05607cd9
Fix ossl_x509v3_cache_extensions(): EXFLAG_NO_FINGERPRINT should not be an error
|
3 years ago |
|
Dr. David von Oheimb
|
a2db4e6cd6
crypto/x509/v3_purp.c: Improve coding style
|
2 years ago |
|
Dr. David von Oheimb
|
f9ac6f6956
Improve the documentation of cert path building and validation
|
3 years ago |
|
Matt Caswell
|
0a4e660a27
Update check_sig_alg_match() to work with provided keys
|
3 years ago |
 David Benjamin
|
cdf63a3736
Add X509 version constants.
|
3 years ago |
 Pauli
|
96a68f21c3
x509: fix coverity 1461225: data race condition
|
3 years ago |
 Shane Lontis
|
4669015d7b
Add ossl_ x509 symbols
|
3 years ago |
 Rich Salz
|
cd3f8c1b11
Always check CRYPTO_LOCK_{read,write}_lock
|
3 years ago |
|
Dr. David von Oheimb
|
4ef70dbcf4
Code cleanup mostly in crypto/x509/v3_purp.c
|
3 years ago |
|
Dr. David von Oheimb
|
199df4a93f
check_sig_alg_match(): weaken sig nid comparison to allow RSA{,PSS} key verify RSA-PSS
|
3 years ago |
 Richard Levitte
|
4333b89f50
Update copyright year
|
3 years ago |
|
Dr. David von Oheimb
|
f2a0458731
X509_cmp(): Fix comparison in case x509v3_cache_extensions() failed to due to invalid cert
|
3 years ago |
|
Richard Levitte
|
9311d0c471
Convert all {NAME}err() in crypto/ to their corresponding ERR_raise() call
|
4 years ago |
|
Dr. David von Oheimb
|
4ff993d791
Implement treatment of id-pkix-ocsp-no-check extension for OCSP_basic_verify()
|
4 years ago |
 Tomas Mraz
|
67ecd65cc4
Rename check_chain_extensions to check_chain
|
4 years ago |
|
Matt Caswell
|
b4780134df
Fix safestack issues in asn1.h
|
4 years ago |
|
Matt Caswell
|
e144fd36ce
Fix safestack issues in x509v3.h
|
4 years ago |
|
Dr. David von Oheimb
|
da6c691d6d
check_chain_extensions(): Add check that on empty Subject the SAN must be marked critical
|
4 years ago |
|
Dr. David von Oheimb
|
89f13ca434
check_chain_extensions(): Add check that AKID and SKID are not marked critical
|
4 years ago |
|
Dr. David von Oheimb
|
8a639b9d72
check_chain_extensions(): Add check that Basic Constraints of CA cert are marked critical
|
4 years ago |
|
Dr. David von Oheimb
|
1e41dadfa7
Extend X509 cert checks and error reporting in v3_{purp,crld}.c and x509_{set,vfy}.c
|
4 years ago |
|
Dr. David von Oheimb
|
de3713d492
Make sure x509v3_cache_extensions() does not modify the error queue
|
4 years ago |
|
Shane Lontis
|
6725682d77
Add X509 related libctx changes.
|
4 years ago |
